Vulnerabilities

TI-2026-13104 CVE-2026-15570 · GHSA-7535-6xrw-p7v8

Improper URL Scheme and Destination Validation in SmartCenter browserseturl Command

LOW 31

An improper restriction of URL schemes and destinations in the SmartCenter browserseturl command in the Telefunken TE24553B45V2DZ Smart TV running on the Vestel MB181 / Voltron181 / TiVo OS platform allows an attacker wi…

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00258 Published 2026-08-07 Fixed in V2.85.2.0 CWE-918

TI-2025-03173 CVE-2025-3606 · GHSA-7rfh-xp3x-jh62

Vestel AC Charger Exposure of Sensitive System Information to an Unauthorized Control Sphere

MEDIUM 44

Vestel AC Charger version 3.75.0 contains a vulnerability that could enable an attacker to access files containing sensitive information, such as credentials which could be used to further compromise the device.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00415 Published 2025-04-24 No fix listed CWE-497

TI-2024-08355 CVE-2024-8997 · GHSA-639q-6q9p-hmc8

SQLi in Vestel's EVC04 Configuration Interface

MEDIUM 49

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Vestel EVC04 Configuration Interface allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00434 Published 2025-03-18 Fixed in V3.187, V4.53 CWE-89

Vulnerabilities

Filters

Improper URL Scheme and Destination Validation in SmartCenter browserseturl Command

Vestel AC Charger Exposure of Sensitive System Information to an Unauthorized Control Sphere

SQLi in Vestel's EVC04 Configuration Interface